» cfshellex64_1.5.39.dll
Overview
Analysis
File Details

cfshellex64_1.5.39.dll

Cloudfogger

Cloudfogger GmbH

File name:

Publisher:

Cloudfogger GmbH (signed and verified)

Product:

Cloudfogger

Description:

Cloudfogger ShellExtension

Version:

1.5.39

MD5:

9705548d0d9d6f4d47a52d10e05ddf71

SHA-1:

766934d50e5c1e9713098438ff3bbedb723a574a

SHA-256:

615636e19e210387d4b90ed4cc37b27693b7154af39958554748d6c05ad263c1

Scanner detections:

0 / 68

Status:

Clean (as of last analysis)

Analysis date:

5/8/2024 1:08:05 AM UTC (today)

File size:

921.3 KB (943,384 bytes)

Product version:

1.5.39

File type:

Dynamic link library (Win64 DLL)

Common path:

C:\Program Files\cloudfogger\cfshellex64_1.5.39.dll

Digital Signature

Signed by:

Cloudfogger GmbH

Authority:

GlobalSign nv-sa

Valid from:

12/15/2015 1:35:09 AM

Valid to:

1/14/2017 1:35:09 AM

Subject:

CN=Cloudfogger GmbH, O=Cloudfogger GmbH, L=Goeppingen, S=Baden-Wuerttemberg, C=DE

Issuer:

CN=GlobalSign CodeSigning CA - SHA256 - G2, O=GlobalSign nv-sa, C=BE

Serial number:

11218228E9009103580A40890B180B0B1311

Registration

CLSIDs:

{0C976707-C813-44E3-A947-5BE28191C0C0}, {59DC75AA-78CD-493C-BF1F-468F808204C0}, {66E1C382-CA25-4FE1-8865-EE773C40CDAF}, {73A89593-86C1-44D7-B80D-433103E9C617}

COM registered:

Yes

File PE Metadata

Compilation timestamp:

2/25/2016 1:04:07 AM

OS version:

6.0

OS bitness:

Win64

Subsystem:

Windows GUI

Linker version:

12.0

CTPH (ssdeep):

24576:Nl0F2NseVTF7Gnw5uIkMp1QSfRERkLoULAR4zT:BseNlGnw5uyp1QSfRQULAR4zT

Entry address:

0xAC85C

Entry point:

48, 89, 5C, 24, 08, 48, 89, 74, 24, 10, 57, 48, 83, EC, 20, 49, 8B, F8, 8B, DA, 48, 8B, F1, 83, FA, 01, 75, 05, E8, B3, 04, 00, 00, 4C, 8B, C7, 8B, D3, 48, 8B, CE, 48, 8B, 5C, 24, 30, 48, 8B, 74, 24, 38, 48, 83, C4, 20, 5F, E9, 03, 00, 00, 00, CC, CC, CC, 48, 8B, C4, 48, 89, 58, 08, 48, 89, 70, 10, 48, 89, 78, 18, 41, 56, 48, 83, EC, 30, 49, 8B, F0, 8B, FA, 4C, 8B, F1, BB, 01, 00, 00, 00, 89, 58, E8, 89, 15, 49, C7, 02, 00, 85, D2, 75, 12, 39, 15, 73, FD, 02, 00, 75, 0A, 33, DB, 89, 58, E8, E9, CB, 00, 00... 
[+]

Entropy:

6.4562

Code size:

705.5 KB (722,432 bytes)

Scan cfshellex64_1.5.39.dll - Powered by Reason Core Security

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.